Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File:                     q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier:          FH2wl+XXEuT8uVo/Wqduzx3uHwL80QPlbUFjDCfj+YI=
Subject key identifier:   7E:F5:29:D1:E4:CC:A3:1A:3F:91:F4:61:F1:D0:1A:9D:1E:69:90:1E
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer:       /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial:       01977A5446A4E4C557830C20793C1AD0FD87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number:          1598
Signing time:             Mon 16 Jun 2025 20:00:32 +0000
Manifest this update:     Mon 16 Jun 2025 20:00:32 +0000
Manifest next update:     Tue 17 Jun 2025 20:00:32 +0000
Files and hashes:         1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=)
                          2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: tgmajrx8J2nniABRcmxagSeO/SSOJXMDIDLHjcmi/pA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:54:46:a4:e4:c5:57:83:0c:20:79:3c:1a:d0:fd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
        Validity
            Not Before: Jun 16 20:00:32 2025 GMT
            Not After : Jun 17 20:00:32 2025 GMT
        Subject: CN=7ef529d1e4cca31a3f91f461f1d01a9d1e69901e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:6f:af:ec:2b:9c:52:20:bd:7e:a8:75:4f:
                    af:24:5e:36:d8:fd:dd:4e:73:bd:5d:e7:f5:d9:cb:
                    2b:02:19:3c:e9:cd:1b:65:9d:8c:23:5a:a7:c9:fa:
                    95:91:9d:14:18:90:9a:7e:95:ec:dc:8d:ee:eb:5d:
                    e0:a2:61:84:31:98:ef:69:72:75:19:31:e7:a3:61:
                    e9:79:76:4e:e9:63:16:ac:f8:a2:5b:7c:9b:ae:9a:
                    ac:18:86:2a:2a:ec:12:75:d8:f9:20:8c:27:6c:7c:
                    a1:5d:21:c7:85:01:86:c4:ca:2b:3e:d2:e5:bf:fa:
                    5c:c4:4f:d2:f5:55:44:0b:e2:8b:e3:3a:8e:9a:1c:
                    7a:31:ed:1c:34:07:52:19:f5:2b:33:26:8d:d5:9a:
                    b0:13:4d:9c:a6:9e:08:f0:f9:a9:29:8a:97:00:ea:
                    65:cb:fb:ba:ce:a3:35:d7:47:d8:70:a6:fa:e0:7b:
                    d1:0e:9a:b7:cf:6b:7e:61:2c:01:3c:e7:44:03:7a:
                    e0:5f:dc:66:36:6b:66:97:a3:bc:39:08:6c:93:22:
                    1c:7e:02:35:fb:eb:f9:88:40:3c:b3:fd:64:e6:42:
                    25:e1:f3:db:b7:65:b4:d7:36:be:fe:25:a3:97:c5:
                    d8:68:7b:dd:0a:d5:b9:0d:02:3d:55:d1:99:8d:98:
                    fb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F5:29:D1:E4:CC:A3:1A:3F:91:F4:61:F1:D0:1A:9D:1E:69:90:1E
            X509v3 Authority Key Identifier:
                keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:5d:11:f0:ff:23:71:85:a3:6a:c0:d4:ca:4a:20:e1:14:d5:
         5f:89:3c:e6:f5:44:cb:8a:fc:8e:4b:cd:7e:e9:49:b2:7d:61:
         83:e8:3c:8b:fb:b7:50:1e:7c:da:d9:2a:3d:40:da:bb:25:9f:
         34:c4:13:ca:f2:c5:26:76:c4:ca:91:9e:e0:e5:6b:09:af:6c:
         41:eb:15:30:15:6f:28:81:ce:68:89:6d:4a:d2:c3:bf:56:fc:
         35:e2:5a:9e:d0:37:1a:b2:30:e4:b8:b9:cb:4d:5c:74:b8:4e:
         57:7e:10:ca:aa:5d:b7:8b:17:a2:23:a7:f8:fc:0b:10:bb:3c:
         a4:e2:00:e2:ea:17:48:e1:f1:36:f5:ae:f7:50:b1:f9:c4:e4:
         b0:82:27:58:60:b0:53:d4:56:9c:6c:b7:3c:63:c8:8d:a3:c8:
         89:f8:d0:18:c8:4a:b0:bc:2c:31:0a:23:ec:6a:68:80:41:b0:
         56:c2:78:b4:a2:33:d2:bb:d4:eb:39:a3:30:19:1f:52:d0:17:
         47:84:f2:10:1c:0d:c2:9b:59:96:b7:19:e5:8f:25:87:84:e3:
         17:0c:02:26:fb:6d:06:2f:ff:39:ec:e8:97:dc:d5:69:7f:ee:
         b1:7b:27:02:bb:0b:c3:1e:4b:1b:c1:b6:f6:9e:0d:e4:94:f4:
         10:27:7b:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6VEak5MVXgwwgeTwa0P2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTNlYzBlOWEwNTNjYmJlMGU5YTA3MWJjYWQ5ZTY4YTk5
Y2NmYTgwHhcNMjUwNjE2MjAwMDMyWhcNMjUwNjE3MjAwMDMyWjAzMTEwLwYDVQQD
Eyg3ZWY1MjlkMWU0Y2NhMzFhM2Y5MWY0NjFmMWQwMWE5ZDFlNjk5MDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DVvr+wrnFIgvX6odU+vJF422P3d
TnO9Xef12csrAhk86c0bZZ2MI1qnyfqVkZ0UGJCafpXs3I3u613gomGEMZjvaXJ1
GTHno2HpeXZO6WMWrPiiW3ybrpqsGIYqKuwSddj5IIwnbHyhXSHHhQGGxMorPtLl
v/pcxE/S9VVEC+KL4zqOmhx6Me0cNAdSGfUrMyaN1ZqwE02cpp4I8PmpKYqXAOpl
y/u6zqM110fYcKb64HvRDpq3z2t+YSwBPOdEA3rgX9xmNmtml6O8OQhskyIcfgI1
++v5iEA8s/1k5kIl4fPbt2W01za+/iWjl8XYaHvdCtW5DQI9VdGZjZj7kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH71KdHkzKMaP5H0YfHQGp0eaZAeMB8GA1UdIwQY
MBaAFKtT7A6aBTy74OmgcbytnmipnM+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMt
NjNmY2FhYzMxY2EzLzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMtNjNmY2FhYzMxY2Ez
LzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuV0R8P8j
cYWjasDUykog4RTVX4k85vVEy4r8jkvNfulJsn1hg+g8i/u3UB582tkqPUDauyWf
NMQTyvLFJnbEypGe4OVrCa9sQesVMBVvKIHOaIltStLDv1b8NeJantA3GrIw5Li5
y01cdLhOV34Qyqpdt4sXoiOn+PwLELs8pOIA4uoXSOHxNvWu91Cx+cTksIInWGCw
U9RWnGy3PGPIjaPIifjQGMhKsLwsMQoj7GpogEGwVsJ4tKIz0rvU6zmjMBkfUtAX
R4TyEBwNwptZlrcZ5Y8lh4TjFwwCJvttBi//Oezol9zVaX/usXsnArsLwx5LG8G2
9p4N5JT0ECd7tA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:34:19 2025 by rpki-client